windows instant user logoff on login

Posted on 2009-04-15
Medium Priority
Last Modified: 2012-05-06
I have a computer badly infected with viruses. I removed the viruses by slaving the drive to another machine and running several virus scanners. Unfortunately now when I load windows, every time I click on any user profile, I am instantly logged back off. So it makes the log on noise, and then half a second later it boots me back to the log on screen. I have tried a repair install as well as several microsoft KB articles related to this problem with no change.

Any ideas?
Question by:zoogelsnof
  • 4
LVL 26

Expert Comment

ID: 24154441
Do you get any error messages at all? If so, what are they? Can you post a HijackThis log for the drive?
LVL 66

Accepted Solution

johnb6767 earned 2000 total points
ID: 24154466
The userinit value is possibly corrupted in the registry....

How to edit the registry offline using BartPE boot CD ?

Just follow the directions in the article, about loading the SYSTEM hive, and navigate to the following key

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Look for the followingvalue....

Userinit=C:\Windows\system32\userinit.exe, <~~~~ Should look EXACTLY like this, including the comma...

You can do it either way, with BartPE, or UBCD4Win. Or simply slave this drive into another workstation....

What is the Ultimate Boot CD for Windows?

Bart's Preinstalled Environment (BartPE) bootable live windows CD/DVD
LVL 66

Expert Comment

ID: 24154470
Also, there could be a possibilty that the userinit.exe is not the proper one, and you can extract a good copy from the CD..... It should be 24-26kb, and signed from MS......

Rename the existing one, to have a backup of it....

rename c:\windows\system32\userinit.exe to c:\windows\system32\userinit.old


Extract a copy from the CD, or I386 directory.
If the CDRom is D....

expand d:\i386\userinit.ex__ c:\windows\system32\userinit.exe

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

LVL 66

Expert Comment

ID: 24154471
This can also be done remotely from another PC if it is networked, using explorer and Remote Registry....

Author Closing Comment

ID: 31570820
Perfect! got it, thanks!
LVL 66

Expert Comment

ID: 24157816
Glad your fixed!

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Step by step guide to Clean and Sort your windows registry! Introduction: Always remember: A Clean registry = Better performance = Save your invaluable time In this article we're going to clear our registry manually! Yes, manually! The e…
Issue: Unstable cursor in Windows XP and Windows runs extremely slow in that any click will bring up the Hour glass (sometimes for several seconds before giving you what you want) . Troubleshooting Process and the FINAL FIX: This issue see…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
This lesson discusses how to use a Mainform + Subforms in Microsoft Access to find and enter data for payments on orders. The sample data comes from a custom shop that builds and sells movable storage structures that are delivered to your property. …
Suggested Courses
Course of the Month14 days, 12 hours left to enroll

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question